FR-AG-002 — Artifact Export Packages

Go to Crucible Air-Gapped Operations Requirements

Statement

Crucible SHALL create an Artifact Export Package containing identified Artifacts and the metadata required to transfer those Artifacts across a Transfer Boundary.

Source Statement

The system shall support artifact export packages.

Source

Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-AG-002.

Assessment

The source statement identifies a required package type but does not state the required package-creation behavior.

The following Specification Discipline and Authoring findings apply:

The system does not use the defined system nameshall does not follow the established uppercase normative conventionSupport is a weak verbArtifact export packages does not identify whether Crucible creates, validates, transfers, or consumes the packageThe source statement does not identify the package contentsThe source statement does not identify the transfer contextThe source statement does not prescribe a package format, archive technology, storage medium, transfer mechanism, or cryptographic mechanismThe normalized Statement:

Replaces The system with CrucibleReplaces support with the direct behavior createIdentifies the included ArtifactsRequires metadata needed for transferIdentifies a Transfer Boundary as the transfer contextPreserves implementation independenceRetains one primary required behaviorArtifact Export Package should receive a glossary definition because it identifies a distinct transfer artifact.

Rationale

An Artifact Export Package groups the Artifacts and associated metadata required for controlled transfer from one environment to another.

The package may contain:

Infrastructure configurationsBaseline recordsDeployment configurationsSoftware packagesDependency artifactsCompliance evidenceDigital signaturesContent digestsManifestsProvenance recordsTraceability recordsImport instructionsThe associated metadata may identify:

Package identifierPackage revisionIncluded ArtifactsArtifact identifiersArtifact revisionsArtifact content digestsSource environmentIntended destination environmentTransfer authorizationIntegrity informationCreation timeCreating actor or processApplicable BaselineFR-AG-002 requires package creation. Separate requirements govern transfer authorization, transport, package-integrity verification, and import.

Applies To

This requirement applies to:

Artifact Export PackagesArtifactsPackage manifestsArtifact identifiersArtifact revisionsContent digestsDigital signaturesTransfer metadataTransfer BoundariesTransfer Authorizations

Verification

Verification SHALL confirm that the Artifacts selected for export are identifiedVerification SHALL confirm that Crucible creates an Artifact Export PackageVerification SHALL confirm that the package contains the identified ArtifactsVerification SHALL confirm that the package contains the metadata required for transfer across the applicable Transfer BoundaryVerification may include:

Export-package creation testingPackage-content inspectionManifest inspectionArtifact identifier comparisonArtifact revision comparisonContent-digest comparisonTransfer-metadata inspectionThe verification record SHALL identify:

The Artifact Export PackageThe included ArtifactsThe package manifestThe Artifact identifiersThe Artifact revisionsThe applicable Transfer BoundaryThe transfer metadataThe export resultThe generated Evidence

Outgoing Traceability

This requirement realizes:

This requirement relates to:

Referenced By

The wiki Backlinks function provides the current list of pages that reference FR-AG-002.

Incoming Traceability should be derived dynamically from backlinks rather than maintained as a duplicate manual list.

ConOps Relationship

The Crucible Concept of Operations describes packaging captured Artifacts and dependencies for authorized transfer from a Connected Environment to a Disconnected Environment.

FR-AG-002 establishes the required package-creation behavior for that supply chain.

Delivery Phase

Phase 1

Implementation Status

Not Assessed

Requirement Status

Draft

Notes for Editors

This requirement page should retain the stable requirement identifier FR-AG-002.

Changes to the Statement SHALL preserve the approved intent of the source requirement.

The Statement should remain limited to creation of an Artifact Export Package containing identified Artifacts and required transfer metadata.

Requirements for transport, Transfer Authorization, package integrity verification, and import should remain separate.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-05-air-gap-operations:fr-ag-002#Statement&noheader&nofooter&noeditbtn}}

Do not rename this page after an external citation unless a redirect or move plan is in place.

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.